Skip to content

When Your Data Is Breached

N.D.C.C. § 51-30-02 — a business must tell residents whose unencrypted information was taken

Personal information is a name with an unencrypted social security number, driver's license or ID number, financial account details with the code to use them, and the other items the section lists.

Email
  • A business holding that data must disclose a breach to every resident whose unencrypted information was, or is reasonably believed to have been, taken.
  • Notice comes in the most expedient time possible without unreasonable delay, allowing for law enforcement needs.
  • A breach of more than two hundred fifty people must also be reported to the attorney general.
  • A violation is treated as a violation of the consumer fraud law.
Sources for this section (3)
  1. N.D.C.C. § 51-30-01 — Definitions
  2. N.D.C.C. § 51-30-02 — Notice to attorney general and consumers
  3. N.D.C.C. § 51-30-07 — Enforcement - Powers - Remedies - Penalties

Legal information, not legal advice. Verified as of October 2026. Applying it to a particular situation is the work of a licensed North Dakota attorney.

From here